Apple reports spike in national security requests amid promises of more transparency

The number of U.S. national security-related data requests to Apple Inc. more than doubled last year, according to a biannual transparency report released by the tech goliath Friday.

The number of data requests from the U.S. government to Apple Inc. more than doubled last year, according to a biannual transparency report released by the consumer tech giant Friday.

Apple received 16,249 national security requests across 8,249 accounts between July 1, 2017 and Dec. 31, 2017, almost three times higher than the amount of requests received during the same period in 2016, when the company saw just 5,999 such requests, according to Reuters.

“The national security requests demand that Apple provide information in response to U.S. National Security legal authorities…Though we would like to be more specific, by law this is the most precise information we are currently allowed to disclose,” Apple’s privacy policy reads.

Other major tech firms also saw jumps in national security requests between the end of 2016 and the first half of 2017, Reuters reports. Facebook saw such requests nearly double, and Google reported a 36 percent increase in requests.

In the near future, the public will be given an even clearer view of governments’ interactions with the world’s tech giants. Apple included in the transparency report that it will begin disclosing government requests to remove apps from the App Store, starting with the July 1 – Dec. 31, 2018 report.

Broadly speaking, a national security data request is usually made to compel access to private user information that’s stored by the company. These requests sometimes allow the government to learn more about suspected terrorists, criminals or other targets in order to pursue legal charges.

The new disclosure policy comes as criticism mounts against Apple for bowing to pressure from the Chinese government to remove privacy tools for users in China. Last year, Apple removed all VPNs from its Chinese app store, making it much more difficult for iOS users there to bypass the country’s strict internet censors.

In February, the company began hosting Chinese users’ iCloud accounts on servers in China rather than in the U.S., per new Chinese laws, Reuters reported. Now, Chinese authorities have sweeping access to private data stored on the cloud, and can bypass the U.S. legal system.

And just this month, Apple restricted in China any apps that use the company’s CallKit protocol, which allowed users to make calls over the internet, citing new cybersecurity laws. China’s Ministry of Public Security worried the tools would allow users to bypass censors and evade state surveillance.

DarkSword’s GitHub leak threatens to turn elite iPhone hacking into a tool for the masses

Cybersecurity researchers say the GitHub leak threatens to "democratize" iPhone exploits that were once reserved for nation-states, potentially putting hundreds of millions of iOS 18 devices at…

Possible U.S.-developed exploits linked to first known ‘mass’ iOS attack

Rep. Garbarino: Ending CISA mobile app security program for feds sends ‘wrong signal’

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• Jail time for Maine child in 764 marks turning point in federal law enforcement

Technology

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

• The Collective Cyber Defense letter wrote your next vendor questionnaire

Threats

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

• Dogged Russia-based botnet dismantled after 23-year run

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure